Merge pull request #5478 from galaxyproject/kooka-triceratops

improve security of some workflows

.github/workflows/ci-main.yml

@@ -28,6 +28,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 1
+          persist-credentials: false
 
       - uses: reviewdog/action-setup@v1
         with:

.github/workflows/ci.yml

@@ -17,6 +17,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 1
+          persist-credentials: false
 
       # BEGIN Dependencies
       - uses: actions/setup-python@v5

.github/workflows/cron-commit-cache.yml

@@ -15,6 +15,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 1000
+          persist-credentials: false
 
       # BEGIN Dependencies
       - uses: ruby/setup-ruby@v1

.github/workflows/deploy.yml

@@ -28,6 +28,7 @@ jobs:
           #  3rd Qu.: 94.0
           #  Max.   :282.0
           fetch-depth: 400
+          persist-credentials: false
 
       # BEGIN Dependencies
       - uses: actions/setup-python@v5